You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@subversion.apache.org by "Bryan Rosander (JIRA)" <ji...@apache.org> on 2017/02/24 22:44:44 UTC

[jira] [Created] (SVN-4673) Reports of SHA-1 collision causing repository breakage

Bryan Rosander created SVN-4673:
-----------------------------------

             Summary: Reports of SHA-1 collision causing repository breakage
                 Key: SVN-4673
                 URL: https://issues.apache.org/jira/browse/SVN-4673
             Project: Subversion
          Issue Type: Bug
            Reporter: Bryan Rosander
            Priority: Critical


Google recently created two pdfs with the same sha-1 checksum [1].  There are reports of this breaking svn repositories[2][3].

[1] https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
[2] https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/
[3] https://lists.webkit.org/pipermail/webkit-dev/2017-February/028795.html



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)